HackerOne
Bug bounty, pentesting and AI red teaming backed by a security researcher community
Own HackerOne? Claim it, free to correct the facts and get the verified badge.
Pricing
Contact for pricing
Company
HackerOne
Platforms
What is HackerOne?
HackerOne is a security platform that finds, validates and helps fix vulnerabilities by combining agentic AI with a large community of security researchers. It covers bug bounty programs, vulnerability disclosure, pentesting, code security and adversarial testing of AI systems.
The H1 Platform connects discovery, validation, prioritization and remediation in one system. Hai, its agentic AI orchestrator, scores and validates findings. H1 Remediation sends fix plans informed by the source code to engineering teams. Other products include H1 Bounty, time-boxed Bounty Challenges, H1 Agentic Pentest, H1 Continuous Testing, H1 Code for pull request review, and H1 AI Red Teaming mapped to the OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF.
HackerOne says more than 1,300 companies use it, among them Snap and Shopify. It suits enterprise security teams, public sector bodies and Web3 companies. Pricing goes through sales, and a Community Edition is also listed.
Key features
- Bug bounty programs run with vetted security researchers
- Time-boxed Bounty Challenges for a specific scope
- Agentic AI pentesting combined with human experts
- Continuous testing across the attack surface
- Hai AI agent for validating and prioritizing findings
- Fix plans informed by source code, sent to engineering
- AI pull request review through H1 Code
- AI red teaming mapped to OWASP LLM Top 10 and NIST AI RMF
Use cases
Who it's for
Running a bug bounty program
Pay external researchers to find critical vulnerabilities, including business logic flaws that automated scanners miss.
Vulnerability disclosure
Use H1 Response as an always-on channel for receiving outside vulnerability reports and tracking them until they are fixed.
Testing AI models
Run adversarial red teaming against AI systems and models, mapped to MITRE ATLAS and the OWASP LLM Top 10.
Continuous pentesting
Replace one-off pentests with ongoing testing by AI agents and human experts.
HackerOne pricing
From the vendor's site, checked Nov 12, 2026. Prices change — confirm on their pricing page.
| Plan | Professional | Enterprise | Enterprise Plus |
|---|---|---|---|
| Price | Contact sales | Contact sales | Contact sales |
| Automations a month | Up to 5,000 | Unlimited | Unlimited |
| SCIM | — | Yes | Yes |
| VDP programs | Always-on VDP | Always-on VDP | Multiple, customizable |
| Also |
|
|
|
Every plan: RBAC and SSO
Get an email when HackerOne changes its prices
One mail per change, a stop link in each. Nothing else.
How HackerOne compares
- HackerOne has no free plan, and neither do the 2 alternatives below.
| Tool | Starts at | Free plan | Free trial | API | Open source | |
|---|---|---|---|---|---|---|
| HHackerOne | Quote | — | — | — | — | |
B Bugcrowd | Quote | — | — | — | — | HackerOne vs Bugcrowd |
I Intigriti | Quote | — | — | — | — | HackerOne vs Intigriti |
The closest alternatives in our directory by category. “Starts at” is the cheapest paid plan per month, as each vendor lists it.
Pros and cons
Strengths
- Large researcher community, with 600k+ bugs found
- Covers bounty, pentest, code security and AI red teaming in one platform
- Used by companies such as Snap and Shopify
- Validation claimed at 95% accuracy
Limitations
- Pricing is only available through sales
- Aimed mainly at enterprises
HackerOne FAQ
How much does HackerOne cost?
No public prices are listed. You request pricing by speaking with a security expert, and HackerOne says its team typically responds within 1 business day.
What does HackerOne offer?
Bug bounty, vulnerability disclosure, agentic pentesting, continuous testing, code security, remediation and AI red teaming.
Can security researchers join?
Yes. Researchers can join the community to earn rewards, take part in live hacking events and appear on the leaderboard.
What is Hai?
Hai is HackerOne's agentic AI orchestrator. It scores and validates findings, and HackerOne says it cuts prioritization decisions from hours to seconds.
Used HackerOne? Rate it
Sign in to rate this tool and share how you use it.
HackerOne
Contact for pricing